Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631343a3a2f34382d3438203d3e203531363932.roa
File:                     326131333a646638303a316631343a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier:          y2AXsxCi60PxtTIv/MBRaky11ABI6DoEnQ2VHKPcGJA=
Subject key identifier:   13:4F:4C:06:1B:A4:EC:A5:C6:01:C5:03:06:D7:B4:FC:49:56:BE:18
Certificate issuer:       /CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
Certificate serial:       7C0C480D0CCE7BE9688C674B9C22CE336B6A319B
Authority key identifier: B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631343a3a2f34382d3438203d3e203531363932.roa
Signing time:             Sun 17 Mar 2024 12:20:42 +0000
ROA not before:           Sun 17 Mar 2024 12:15:42 +0000
ROA not after:            Sun 16 Mar 2025 12:20:42 +0000
asID:                     51692
IP address blocks:        2a13:df80:1f14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0c:48:0d:0c:ce:7b:e9:68:8c:67:4b:9c:22:ce:33:6b:6a:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9
        Validity
            Not Before: Mar 17 12:15:42 2024 GMT
            Not After : Mar 16 12:20:42 2025 GMT
        Subject: CN=134F4C061BA4ECA5C601C50306D7B4FC4956BE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:83:5c:de:5a:15:c2:b1:ee:48:3e:2b:61:
                    93:62:b6:02:7f:f3:b7:9c:86:55:8a:e7:2a:e8:ef:
                    74:eb:2c:c7:91:de:88:f2:f4:fa:ed:be:e6:0a:ed:
                    00:e2:a0:a6:91:c5:f1:2a:a0:8f:5a:60:02:4c:66:
                    67:e4:aa:63:48:af:a5:e4:60:44:41:17:fa:44:e1:
                    f6:20:18:4b:d7:e4:4e:73:b4:ca:cf:2f:0a:01:6a:
                    11:a4:3b:b7:32:a5:4b:85:d0:72:df:43:3a:6c:85:
                    5a:87:5f:b5:c4:1d:9c:88:b6:6f:6f:e2:36:8c:dd:
                    82:40:dd:c3:7d:05:6f:e3:c9:6a:97:e0:56:57:67:
                    a7:d4:bf:2b:fe:a4:0d:86:e8:d5:39:ea:00:85:3c:
                    84:24:ee:dd:17:7d:16:4e:67:ec:cb:e3:a3:13:55:
                    61:fc:b3:e6:12:dc:57:5f:16:cb:cc:5d:ca:0a:63:
                    fd:d6:89:80:5c:2c:64:d1:37:5f:38:e4:57:a5:da:
                    cc:4b:69:48:8e:8c:81:65:85:00:09:7c:02:9b:fa:
                    a4:62:fb:18:ee:b8:38:b0:45:5a:6c:ef:a2:86:dd:
                    c6:33:1d:79:d0:64:ba:fd:06:d7:d0:1a:58:28:a0:
                    92:fd:ea:24:73:fb:ca:38:7c:f3:17:9e:b8:1f:6d:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:4C:06:1B:A4:EC:A5:C6:01:C5:03:06:D7:B4:FC:49:56:BE:18
            X509v3 Authority Key Identifier:
                keyid:B3:4D:F9:25:A0:FA:AF:47:E4:E9:46:0A:3D:51:F3:FB:A0:80:79:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/B34DF925A0FAAF47E4E9460A3D51F3FBA08079A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3e90a3c5-3f38-4ddf-b2ca-a4d52ace3c14/1/326131333a646638303a316631343a3a2f34382d3438203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:1f14::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:9b:f3:a9:43:0a:60:84:e0:d5:e1:ca:dc:76:2d:cd:91:
         ad:f2:ec:88:0a:55:40:ed:96:60:3d:a9:f7:4d:74:fd:e5:6b:
         03:ca:c9:41:45:8c:3d:b8:0a:83:85:2d:d6:3b:5b:3c:62:62:
         23:66:84:0a:b0:9a:f2:01:9f:df:cd:52:e7:06:60:b4:8a:fa:
         31:19:22:64:2a:38:c8:67:49:6b:95:8a:3e:08:5c:96:d8:39:
         9f:ce:0f:eb:d4:94:44:d5:46:bc:5a:cd:d2:b0:3e:f5:07:0c:
         55:b5:0a:a4:4d:20:d1:d6:af:cc:8a:67:a1:00:0c:ce:2e:00:
         ae:c3:8b:07:be:2f:13:d8:1e:83:bb:7c:7b:09:35:38:c1:13:
         b6:73:09:90:06:4c:78:c8:c0:d6:ae:13:5e:1d:ca:fb:55:26:
         73:f6:58:62:b0:b8:d7:32:28:e2:0b:f8:ed:d3:46:bf:da:03:
         38:54:2e:7c:78:71:e6:54:ec:0c:73:07:15:9b:eb:66:79:27:
         56:3b:e3:31:15:e2:70:67:7e:1f:4a:17:48:eb:15:52:f2:f9:
         51:c3:27:b6:f0:b7:98:c1:6d:cc:ef:bc:0e:ef:fd:16:1f:81:
         2b:91:27:be:5a:c1:cb:ea:0e:40:a4:27:b0:bf:fe:61:a9:22:
         9d:d2:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----